General
- Target 2026-08-08_155875f088167c2beb71f890a10df04b_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 1.1MB
- Sample260809-apdagsfl41
- SHA256 82c18feb00ecbf25a3e15a79f8b4cb98d796be7d6beb87f3c5b7ab25d1fdc8fa
- MD5 155875f088167c2beb71f890a10df04b
- SHA1 960506e08d1aec9395803911438eb77e67a11fa1
- SHA512 0afc00aaf23b1e19713d1f6bc5fb2f642ecc7040514b97265485cecaed597a52713ab03e250f9da16402c19914da7e4450d26ee981a79d3b5f1b4b3e9d73509f
- SSDEEP 24576:hvO2xJKRI2dOkx2LFAAX1oOYSY82e5QPJJOgufWWsYo:hHHKO2FQd1oOU82lPJ6Po
- TLSH T1C5359D12F7A1C072C8A7427448B6C36EA675BC152B214BCBB7C03B5E5E723D1AE36359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_155875f088167c2beb71f890a10df04b_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_155875f088167c2beb71f890a10df04b_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_155875f088167c2beb71f890a10df04b_amadey_coinminer_elex_glassworm_graphican_remcos_rhadamanthys_smoke-loader_stop
- Size 1.1MB
- SHA256 82c18feb00ecbf25a3e15a79f8b4cb98d796be7d6beb87f3c5b7ab25d1fdc8fa
- MD5 155875f088167c2beb71f890a10df04b
- SHA1 960506e08d1aec9395803911438eb77e67a11fa1
- SHA512 0afc00aaf23b1e19713d1f6bc5fb2f642ecc7040514b97265485cecaed597a52713ab03e250f9da16402c19914da7e4450d26ee981a79d3b5f1b4b3e9d73509f
- SSDEEP 24576:hvO2xJKRI2dOkx2LFAAX1oOYSY82e5QPJJOgufWWsYo:hHHKO2FQd1oOU82lPJ6Po
- TLSH T1C5359D12F7A1C072C8A7427448B6C36EA675BC152B214BCBB7C03B5E5E723D1AE36359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory